DevSecops Engineer

Project, Role and Task Descriptions: • Design, implement, and maintain secure CI/CD pipelines for application build, test, and deployment. • Integrate security scanning, compliance checks, and vulnerability management into development and deployment workflows. • Automate infrastructure provisioning, configuration, and application deployment using modern DevSecOps tools. • Collaborate with development, QA, security, and operations teams to ensure security is embedded throughout the SDLC. • Support and enhance containerization, orchestration, and cloud environments with a strong focus on security best practices.

Candidate Must-Have Skills, Requirements and Nice-to -Have Skills: o CI/CD, Version Control & Security Integration: Experience building enterprise-grade CI/CD pipelines. GitHub (branching, PR workflows, GitHub Actions), GitHub Actions (secure workflows, secrets management, runner configuration), Jenkins (scripted/declarative pipelines, shared libraries), SonarQube (code quality, SAST), Fortify (static code analysis, security scanning). Experience setting up artifact repositories (Nexus, JFrog, ECR) o Configuration Management & Automation: Ansible (roles, playbooks, secure inventory handling). Puppet (manifests, modules, environment management). Strong understanding of Infrastructure as Code (IaC) concepts and tooling (Terraform or CloudFrormation). o Scripting & Development : Bash, Python, Groovy (both for Jenkins and development). Ability to write automation scripts. o Cloud : EC2, S3, IAM (roles, policies, least privilege), VPC networking basics, AWS CloudWatch, SSM, ECS/EKS • o Nice to have : Docker, Openshift, Helm